From ed87f5a72e5fab612c9b66db791fe2936e845f43 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=BC=A0=E6=96=8C?= <259278618@qq.com>
Date: Fri, 22 May 2026 14:26:40 +0800
Subject: [PATCH] 1

---
 .gitea/workflows/deploy.yml | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 .gitea/workflows/deploy.yml

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..6a1a20e
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,34 @@
+name: 全局K3s部署
+on:
+  push:
+    branches: [master]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    env:
+      # 从组织级Secrets读取，不用在仓库重复配置
+      K3S_HOST: ${{ secrets.K3S_HOST }}
+      APP_NAME: ${{ gitea.repo_name }}
+    steps:
+      - name: 拉取代码
+        uses: actions/checkout@v4
+
+      - name: SSH部署K3s
+        run: |
+          mkdir -p ~/.ssh
+          # 写入组织配置的SSH私钥
+          echo "${{ secrets.K3S_SSH_KEY }}" > k3s.pem
+          chmod 600 k3s.pem
+          # 调试：验证私钥是否正确写入
+          echo "私钥文件权限："
+          ls -l k3s.pem
+          echo "私钥头部（仅前5行）："
+          head -5 k3s.pem
+          # 测试连接（会输出服务器主机名和kubectl版本）
+          ssh -i k3s.pem -o StrictHostKeyChecking=no -o ConnectTimeout=10 root@${K3S_HOST} "hostname && kubectl version --client"
+          # 正式执行部署命令
+          ssh -i k3s.pem -o StrictHostKeyChecking=no root@${K3S_HOST} << CMD
+            kubectl apply -f /k8s/deploy.yaml
+            kubectl rollout restart deployment ${APP_NAME}
+          CMD
\ No newline at end of file